CVE-2025-20187: Cisco SD-WAN Manager Software Arbitrary File Creation Vulnerability
Published May 7, 2025
·Updated
A vulnerability in the application data endpoints of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, remote attacker to write arbitrary files to an affected system. This vulnerability is due to improper validation of requests to APIs. An attacker could exploit this vulnerability by sending malicious requests to an API within the affected system. A successful exploit could allow the attacker to conduct directory traversal attacks and write files to an arbitrary location on the affected system.
Affected Software
107 affected components
Cisco Catalyst SD-WAN Manager
Cisco Catalyst SD-WAN Manager=17.2.4
Cisco Catalyst SD-WAN Manager=17.2.5
Cisco Catalyst SD-WAN Manager=17.2.6
Cisco Catalyst SD-WAN Manager=17.2.7
Cisco Catalyst SD-WAN Manager=17.2.8
Cisco Catalyst SD-WAN Manager=17.2.9
Cisco Catalyst SD-WAN Manager=17.2.10
Cisco Catalyst SD-WAN Manager=18.2.0
Cisco Catalyst SD-WAN Manager=18.3.0
Cisco Catalyst SD-WAN Manager=18.3.1
Cisco Catalyst SD-WAN Manager=18.3.1.1
Cisco Catalyst SD-WAN Manager=18.3.3
Cisco Catalyst SD-WAN Manager=18.3.3.1
Cisco Catalyst SD-WAN Manager=18.3.4
Cisco Catalyst SD-WAN Manager=18.3.5
Cisco Catalyst SD-WAN Manager=18.3.6
Cisco Catalyst SD-WAN Manager=18.3.6.1
Cisco Catalyst SD-WAN Manager=18.3.7
Cisco Catalyst SD-WAN Manager=18.3.8
Cisco Catalyst SD-WAN Manager=18.4.0
Cisco Catalyst SD-WAN Manager=18.4.0.1
Cisco Catalyst SD-WAN Manager=18.4.1
Cisco Catalyst SD-WAN Manager=18.4.3
Cisco Catalyst SD-WAN Manager=18.4.4
Cisco Catalyst SD-WAN Manager=18.4.5
Cisco Catalyst SD-WAN Manager=18.4.6
Cisco Catalyst SD-WAN Manager=18.4.302
Cisco Catalyst SD-WAN Manager=18.4.303
Cisco Catalyst SD-WAN Manager=18.4.501_es
Cisco Catalyst SD-WAN Manager=19.0.0
Cisco Catalyst SD-WAN Manager=19.0.1a
Cisco Catalyst SD-WAN Manager=19.1.0
Cisco Catalyst SD-WAN Manager=19.2.0
Cisco Catalyst SD-WAN Manager=19.2.1
Cisco Catalyst SD-WAN Manager=19.2.2
Cisco Catalyst SD-WAN Manager=19.2.3
Cisco Catalyst SD-WAN Manager=19.2.4
Cisco Catalyst SD-WAN Manager=19.2.4.0.1
Cisco Catalyst SD-WAN Manager=19.2.4.0.8
Cisco Catalyst SD-WAN Manager=19.2.4.0.9
Cisco Catalyst SD-WAN Manager=19.2.31
Cisco Catalyst SD-WAN Manager=19.2.32
Cisco Catalyst SD-WAN Manager=19.2.097
Cisco Catalyst SD-WAN Manager=19.2.098
Cisco Catalyst SD-WAN Manager=19.2.099
Cisco Catalyst SD-WAN Manager=19.2.929
Cisco Catalyst SD-WAN Manager=19.3.0
Cisco Catalyst SD-WAN Manager=20.1.1
Cisco Catalyst SD-WAN Manager=20.1.1.1
Cisco Catalyst SD-WAN Manager=20.1.2
Cisco Catalyst SD-WAN Manager=20.1.2_937
Cisco Catalyst SD-WAN Manager=20.1.3
Cisco Catalyst SD-WAN Manager=20.1.3.1
Cisco Catalyst SD-WAN Manager=20.1.12
Cisco Catalyst SD-WAN Manager=20.3.1
Cisco Catalyst SD-WAN Manager=20.3.2
Cisco Catalyst SD-WAN Manager=20.3.2.0.5
Cisco Catalyst SD-WAN Manager=20.3.2.0.6
Cisco Catalyst SD-WAN Manager=20.3.2.1
Cisco Catalyst SD-WAN Manager=20.3.2.1_927
Cisco Catalyst SD-WAN Manager=20.3.2.1_930
Cisco Catalyst SD-WAN Manager=20.3.2_925
Cisco Catalyst SD-WAN Manager=20.3.2_928
Cisco Catalyst SD-WAN Manager=20.3.2_929
Cisco Catalyst SD-WAN Manager=20.3.2_937
Cisco Catalyst SD-WAN Manager=20.3.3
Cisco Catalyst SD-WAN Manager=20.3.3.0.8
Cisco Catalyst SD-WAN Manager=20.3.3.0.14
Cisco Catalyst SD-WAN Manager=20.3.3.0.16
Cisco Catalyst SD-WAN Manager=20.3.3.0.17
Cisco Catalyst SD-WAN Manager=20.3.3.0.18
Cisco Catalyst SD-WAN Manager=20.3.3.1
Cisco Catalyst SD-WAN Manager=20.3.3.1.1
Cisco Catalyst SD-WAN Manager=20.3.3.1.2
Cisco Catalyst SD-WAN Manager=20.3.3.1.5
Cisco Catalyst SD-WAN Manager=20.3.3.1.7
Cisco Catalyst SD-WAN Manager=20.3.3.1.10
Cisco Catalyst SD-WAN Manager=20.3.3.2
Cisco Catalyst SD-WAN Manager=20.3.4
Cisco Catalyst SD-WAN Manager=20.3.4.0.1
Cisco Catalyst SD-WAN Manager=20.3.4.0.5
Cisco Catalyst SD-WAN Manager=20.3.4.0.6
Cisco Catalyst SD-WAN Manager=20.3.4.0.11
Cisco Catalyst SD-WAN Manager=20.3.4.0.19
Cisco Catalyst SD-WAN Manager=20.3.4.0.20
Cisco Catalyst SD-WAN Manager=20.3.4.0.24
Cisco Catalyst SD-WAN Manager=20.3.4.0.25
Cisco Catalyst SD-WAN Manager=20.3.4.0.26
Cisco Catalyst SD-WAN Manager=20.10.1
Cisco Catalyst SD-WAN Manager=20.10.1.1
Cisco Catalyst SD-WAN Manager=20.10.1.2
Cisco Catalyst SD-WAN Manager=20.11.1
Cisco Catalyst SD-WAN Manager=20.11.1.1
Cisco Catalyst SD-WAN Manager=20.11.1.2
Cisco Catalyst SD-WAN Manager=20.12.1
Cisco Catalyst SD-WAN Manager=20.12.2
Cisco Catalyst SD-WAN Manager=20.12.3
Cisco Catalyst SD-WAN Manager=20.12.3.1
Cisco Catalyst SD-WAN Manager=20.12.4
Cisco Catalyst SD-WAN Manager=20.12.4.0.03
Cisco Catalyst SD-WAN Manager=20.12.4.0.4
Cisco Catalyst SD-WAN Manager=20.12.4.1
Cisco Catalyst SD-WAN Manager=20.12.401
Cisco Catalyst SD-WAN Manager=20.13.1
Cisco Catalyst SD-WAN Manager=20.14.1
Cisco Catalyst SD-WAN Manager=20.15.1
Event History
May 7, 2025
CVE Published
via MITRE·05:18 PM
Data Sourced
via MITRE·05:18 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-20187?
CVE-2025-20187 has been classified as a high severity vulnerability due to its potential for remote exploitation.
2
How do I fix CVE-2025-20187?
To fix CVE-2025-20187, ensure that you apply the latest security patches provided by Cisco for the Catalyst SD-WAN Manager.
3
Who is affected by CVE-2025-20187?
CVE-2025-20187 affects Cisco Catalyst SD-WAN Manager, specifically versions that utilize the vulnerable APIs.
4
What are the potential impacts of CVE-2025-20187?
The potential impact of CVE-2025-20187 includes unauthorized remote file writing, which could compromise system integrity.
5
Is CVE-2025-20187 remotely exploitable?
Yes, CVE-2025-20187 is remotely exploitable, allowing authenticated attackers to exploit the vulnerability without physical access.